CVE-2026-55626

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-55626

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55626.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-55626

Aliases

GHSA-m3xx-cpc4-982r

Downstream

DEBIAN-CVE-2026-55626

UBUNTU-CVE-2026-55626

Published

2026-07-20T17:11:44.442Z

Modified

2026-07-23T03:56:33.683079123Z

Severity

8.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L CVSS Calculator

Summary

xrdp: No authentication required with Xvnc backend on RHEL 9

Details

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker could exploit this vulnerability to bypass intended session isolation, allowing them to unauthorizedly view or control the active desktop sessions of other users on the same system. Users using other backends, such as xorgxrdp or Xvnc over TCP sockets, are not affected. This issue has been fixed in version 0.10.6.1.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55626.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-287",
        "CWE-306"
    ]
}

References

Affected packages

Git / github.com/neutrinolabs/xrdp

Affected ranges

Type

GIT

Repo

https://github.com/neutrinolabs/xrdp

Events

Introduced

Fixed

80c52879fead585d6347df5b3c587718adf8f5a5

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.10.6.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v0.*

v0.10.0

v0.10.0-beta.1

v0.10.0-beta.2

v0.10.0-beta.3

v0.10.1

v0.10.2

v0.10.2-rc.1

v0.10.3

v0.10.4

v0.10.4.1

v0.10.5

v0.10.6

v0.10.6.1-rc.1

v0.9.10

v0.9.11

v0.9.12

v0.9.13

v0.9.14

v0.9.15

v0.9.16

v0.9.17

v0.9.18

v0.9.2

v0.9.3

v0.9.3.rc1

v0.9.4

v0.9.4.rc1

v0.9.5

v0.9.6

v0.9.7

v0.9.8

v0.9.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55626.json"